CVE-2015-4485: Buffer Overflow
Heap-based buffer overflow in the resizecontextbuffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via malformed WebM video data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4485?
CVE-2015-4485 has been classified as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary code.
How do I fix CVE-2015-4485?
To mitigate CVE-2015-4485, users should upgrade to Mozilla Firefox version 40.0 or later, or Firefox ESR version 38.2 or later.
Who is affected by CVE-2015-4485?
CVE-2015-4485 affects Mozilla Firefox versions prior to 40.0 and Firefox ESR versions prior to 38.2.
What causes CVE-2015-4485?
CVE-2015-4485 is caused by a heap-based buffer overflow in the resize_context_buffers function in libvpx.
Can CVE-2015-4485 be exploited remotely?
Yes, CVE-2015-4485 can be exploited remotely through the delivery of malformed WebM video data.